Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10f37683-dee6-357d-9186-cf5ff05fb299.roa
File: 10f37683-dee6-357d-9186-cf5ff05fb299.roa (raw, json)
Hash identifier: BqvR6A6zXax9fUSp1uEu7vzPXNj6x17opOvmntb+pSo=
Subject key identifier: 88:A7:28:A1:EB:E6:E6:D9:32:CB:70:16:5F:86:7B:4F:51:A7:31:32
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9642ECDEFDC60D33EEB2DD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10f37683-dee6-357d-9186-cf5ff05fb299.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:42:ec:de:fd:c6:0d:33:ee:b2:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=49018383-b6bf-47c5-aa04-2fa10a8cfbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:94:e3:0f:e9:6f:aa:3a:62:5c:4c:85:fe:
97:0e:d3:bc:96:7a:cf:48:75:77:0f:99:0d:47:4d:
8e:34:e3:76:45:61:20:d6:e2:4b:2d:dd:98:ae:4f:
32:97:b5:5d:49:e4:26:35:56:8f:2f:62:97:e2:70:
d3:5c:82:8f:46:60:6a:8c:b2:08:9d:bb:a4:17:98:
91:f5:b8:7f:32:4e:b3:41:e2:3f:d9:98:d6:84:68:
18:b7:72:74:a6:77:2d:c1:3f:9b:a1:f0:09:8e:06:
d1:b0:1b:89:e2:17:44:c6:b0:56:7a:f4:f9:30:ac:
72:bd:9e:43:10:96:83:0e:26:2f:6c:6d:ed:0e:98:
08:db:32:4d:ee:61:53:fe:75:70:a7:dd:e9:d8:03:
e4:e0:ce:d9:e7:8c:dd:dc:ba:9c:71:63:51:6f:19:
b9:87:7c:1b:eb:a9:64:71:c8:41:57:44:74:f9:3d:
0e:b9:95:a3:2b:99:bc:32:25:37:47:a2:2a:64:99:
b3:4e:aa:5d:66:98:60:c6:7c:06:ff:76:8b:14:8a:
4b:77:df:63:cc:c9:f5:b4:35:10:8a:db:6d:2c:79:
a6:5f:15:d3:2b:0b:61:3a:f2:89:32:19:5c:aa:eb:
77:ef:5f:68:9f:80:f7:da:97:b1:c9:80:20:91:60:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:28:A1:EB:E6:E6:D9:32:CB:70:16:5F:86:7B:4F:51:A7:31:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10f37683-dee6-357d-9186-cf5ff05fb299.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:65:3f:ba:a8:49:27:86:60:36:31:4b:20:c2:bf:22:ab:a1:
00:fb:61:a3:e8:ae:8f:ef:4d:23:7b:1f:f8:48:f6:c8:7b:fa:
11:71:7d:94:41:a7:3c:38:4d:cb:1c:41:e4:d6:0a:2b:96:55:
85:a9:a0:93:33:4e:e3:41:12:b3:64:ef:dc:ad:7e:18:0d:fd:
db:8e:e1:49:18:97:21:5c:eb:93:86:8c:c7:59:6d:e2:05:86:
c7:99:0a:0b:80:0b:a4:ea:75:fe:19:29:56:91:bb:d0:2a:f5:
3e:9c:13:1b:02:c4:44:df:7a:37:06:41:c2:a0:9b:52:0e:59:
13:4b:6f:21:e4:2f:fe:4c:21:28:c1:5e:8c:91:f9:40:1a:ea:
5b:af:8c:b5:4d:6d:e6:72:56:b6:0c:41:0b:d5:eb:df:dd:1d:
f1:5d:70:1e:0f:a5:9d:f8:48:f6:0c:e5:41:00:67:80:7c:ea:
ee:2b:b9:49:f8:72:95:ff:3f:42:f8:b7:c2:ed:98:38:4e:44:
40:99:be:d7:da:e8:9d:42:e4:9c:9e:9c:5c:58:11:c6:2f:f5:
c2:39:25:c2:4c:8f:fa:bf:8e:12:cc:93:d7:54:f0:10:81:e2:
6c:be:0e:85:cd:ca:2a:c6:74:8e:21:83:65:70:24:bb:c5:ab:
aa:4e:40:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:21 2025 by rpki-client